{ "data": { "a": { "slug": "paperclip", "name": "Paperclip", "vendor": "Paperclip Labs, Inc.", "vendorUrl": "https://paperclip.ing", "kind": "harness", "category": "agent-harnesses", "summary": "Paperclip is an open-source, self-hosted server and web interface that organises AI agents into a company with an org chart, tasks, budgets and approvals. It drives Claude Code, Codex, OpenClaw and other harnesses through adapters.", "url": "https://www.anchorterminal.com/tools/paperclip", "markdownUrl": "https://www.anchorterminal.com/tools/paperclip.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/paperclip.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/paperclip.json", "repo": "https://github.com/paperclipai/paperclip", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "paperclipai" }, { "registry": "npm", "name": "@paperclipai/mcp-server" }, { "registry": "oci", "name": "ghcr.io/paperclipai/paperclip" } ], "auth": "mixed", "authNotes": "No Paperclip account. The default `local_trusted` mode needs no login on loopback. Authenticated mode uses browser sessions for people, board API keys for scripts, and agent API keys or short-lived run JWTs as bearer tokens.", "pricing": "free", "pricingNotes": "Free and MIT, self-hosted, with nothing to buy. The owner pays each harness's model provider or subscription. Paperclip Cloud is a waitlist with no published price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the site or the server source (checked 2026-10-08). The only mention in the repository is a link to a third-party skill in a planning note.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 98666, "npmWeekly": 59684, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.paperclip.ing", "llmsTxt": "https://paperclip.ing/llms.txt", "capabilities": [ "agent.multi-agent", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "llms-txt", "docker", "mcp", "typescript" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 59, "grade": "C", "agentReady": false, "rank": 642, "ranked": true, "rankOf": 1210, "categoryRank": 23, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 78, "payments": 60, "reliability": 66, "schema": 81, "security": 64, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -10, "negativeNotes": [ "2026-04-10 to 2026-04-16. Ten advisories published in a week, four of them critical, among them GHSA-68qg-g8mg-6pr7 (CVE-2026-41679, 10.0, unauthenticated remote code execution through an import authorisation bypass) and two cross-tenant agent key flaws rated 9.9. All ten list 2026.416.0 as the fix. Fixed and published, a little under six months old, -5. https://github.com/paperclipai/paperclip/security/advisories", "2026-07-22. GHSA-x8hx-rhr2-9rf7 (9.6), drive-by remote code execution against the default `local_trusted` mode through DNS rebinding. The advisory names no patched version. The current source applies the hostname guard to `local_trusted` private deployments, so we read it as fixed without a documented version, -3. https://github.com/paperclipai/paperclip/security/advisories/GHSA-x8hx-rhr2-9rf7", "2026-04-16. GHSA-gqqj-85qm-8qhf (8.7), a `codex_local` agent inherited a Gmail connector from the owner's ChatGPT account and sent real email. The advisory names no patched version, and `codex_local` still defaults to bypassing approvals and the sandbox, -2. https://github.com/paperclipai/paperclip/security/advisories/GHSA-gqqj-85qm-8qhf" ], "verdict": "Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.", "bestFor": "Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.", "strengths": [ "One deployment runs agents on Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Pi, Hermes, Grok Build, Kimi Code and OpenClaw through adapters, under one org chart", "Board approvals gate agent hires and the CEO agent's strategy, and connection actions can be set to Allowed, Ask first or Off", "Budgets by company, agent and project pause an agent at 100 per cent of recorded spend", "The running server publishes its REST surface as OpenAPI at `/api/openapi.json`, and the docs site answers every page as Markdown at `.md`", "Eleven stable releases between 20 July and 5 October 2026, each with dated notes and an upgrade guide" ], "weaknesses": [ "`claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host", "Twelve published security advisories since April 2026, five critical, including CVE-2026-41679 (unauthenticated remote code execution, fixed in 2026.416.0)", "Anonymous usage telemetry is on by default and goes to telemetry.paperclip.ing until an opt-out is set", "2,849 open issues on 8 October 2026, 1,396 of them with no comment, and 78 closed in 30 days against 686 opened", "Calendar versions with no 1.0, and release 2026.916.0 carried five breaking changes" ], "agentNotes": [ "Set `PAPERCLIP_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1` before the first start. Telemetry is on by default", "Set `dangerouslySkipPermissions` and `dangerouslyBypassApprovalsAndSandbox` to false on agents that read untrusted input, or run them in a sandbox provider", "Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there", "Use `--bind lan` or `--bind tailnet` at onboarding for anything beyond one machine. The default `local_trusted` mode treats every request as the board admin", "Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59 } ], "editorialScores": { "ergonomics": 70, "maintenance": 78, "payments": 60, "reliability": 66, "schema": 81, "security": 64, "transparency": 73 }, "provenanceScore": 56, "checked": { "categories": { "ergonomics": "2026-10-08", "maintenance": "2026-10-08", "payments": "2026-10-08", "reliability": "2026-10-08", "schema": "2026-10-08", "security": "2026-10-08", "transparency": "2026-10-08" }, "last": "2026-10-08", "oldest": "2026-10-08", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx paperclipai@latest onboard --yes # Node.js 24.11 or newer", "http": "curl http://localhost:3100/api/health", "headless": { "command": "npx paperclipai issue create --title \"$TASK\" --json", "env": { "PAPERCLIP_API_KEY": "\u003cboard or agent key\u003e", "PAPERCLIP_TELEMETRY_DISABLED": "1" } } }, "letme": { "capability": "https://letme.dev/agent.multi-agent", "tool": "https://letme.dev/paperclip" }, "area": "frameworks", "provenance": { "legalEntity": "Paperclip Labs, Inc.", "domain": "paperclip.ing", "domainRegistered": "2026-03-02", "endpointOnVendorDomain": null, "terms": "https://paperclip.ing/terms/", "privacy": "https://paperclip.ing/privacy/", "statusPage": "", "changelog": "https://paperclip.ing/changelog/", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms (effective 1 April 2026, updated 23 July 2026) and the privacy policy (effective 23 July 2026) name Paperclip Labs, Inc. and Delaware law. The licence file in the repository reads Copyright (c) 2025 Paperclip AI.", "RDAP at the .ing registry gives a registration date of 2026-03-02 for paperclip.ing, with Cloudflare as registrar. The GitHub repository was created the same day.", "paperclip.ing/.well-known/security.txt and docs.paperclip.ing/.well-known/security.txt returned 404 on 8 October 2026. SECURITY.md sends reports to GitHub private advisories.", "The software is self-hosted, so there is no vendor endpoint or status page to check. status.paperclip.ing did not answer.", "The privacy policy says it governs the hosted services, and that a self-hosted deployment processes data on the owner's infrastructure." ], "score": 56 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/paperclip.json", "live": { "slug": "paperclip", "versions": [ { "registry": "github", "name": "paperclipai/paperclip", "version": "v2026.1023.0", "released": "2026-10-24", "seenAt": "2026-10-25T09:12:47.232899647Z" }, { "registry": "npm", "name": "@paperclipai/mcp-server", "version": "2026.1023.0", "seenAt": "2026-10-25T09:12:45.704068228Z" }, { "registry": "npm", "name": "paperclipai", "version": "2026.1023.0", "seenAt": "2026-10-25T09:12:45.012542735Z" } ], "githubStars": 107081, "npmWeekly": 36595, "securityTxt": { "url": "https://paperclip.ing/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-25T15:27:37.896892187Z" }, "llmsTxt": { "url": "https://paperclip.ing/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-25T14:52:55.010239358Z" }, "domain": { "domain": "paperclip.ing", "registered": "2026-03-02", "source": "https://pubapi.registry.google/rdap/domain/paperclip.ing", "checkedAt": "2026-10-25T13:55:26.748731314Z" }, "pages": [ { "url": "https://paperclip.ing/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-10-25T02:51:59.236765829Z", "changedAt": "2026-10-24T02:22:26.710785766Z", "fingerprint": "a227bbb641b7" }, { "url": "https://paperclip.ing/privacy/", "kind": "privacy", "status": 304, "checkedAt": "2026-10-25T02:52:01.403680293Z", "changedAt": "2026-10-24T02:22:28.926605099Z", "fingerprint": "0f001aba3049" }, { "url": "https://paperclip.ing/terms/", "kind": "terms", "status": 304, "checkedAt": "2026-10-25T02:52:03.434797871Z", "changedAt": "2026-10-24T02:22:30.943098177Z", "fingerprint": "42aee815daee" } ], "github": { "repo": "paperclipai/paperclip", "checkedAt": "2026-10-19T06:37:12.463310956Z", "stars": 104279, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-19T05:59:36Z", "openIssues": 3165, "openPRs": 3026, "issuesOpened90d": 1586, "issuesClosed90d": 478, "prsMerged90d": 2253, "ci": { "branch": "master", "runs": 50, "success": 40, "failure": 1, "other": 9, "latest": "success", "latestAt": "2026-10-19T06:03:07Z" }, "advisories": [ { "ghsa": "GHSA-x8hx-rhr2-9rf7", "severity": "critical", "published": "2026-07-22T23:12:15Z" }, { "ghsa": "GHSA-3xx2-mqjm-hg9x", "severity": "critical", "published": "2026-04-16T12:24:49Z" }, { "ghsa": "GHSA-fpw4-p57j-hqmq", "severity": "medium", "published": "2026-04-16T12:24:23Z" }, { "ghsa": "GHSA-p7mm-r948-4q3q", "severity": "medium", "published": "2026-04-16T12:24:03Z" }, { "ghsa": "GHSA-47wq-cj9q-wpmp", "severity": "critical", "published": "2026-04-16T12:23:29Z" }, { "ghsa": "GHSA-vr7g-88fq-vhq3", "severity": "critical", "published": "2026-04-16T12:21:04Z" }, { "ghsa": "GHSA-gqqj-85qm-8qhf", "severity": "high", "published": "2026-04-16T12:19:12Z" }, { "ghsa": "GHSA-xfqj-r5qw-8g4j", "severity": "high", "published": "2026-04-16T12:16:47Z" }, { "ghsa": "GHSA-w8hx-hqjv-vjcq", "severity": "high", "published": "2026-04-16T12:16:15Z" }, { "ghsa": "GHSA-265w-rf2w-cjh4", "cve": "CVE-2026-41208", "severity": "high", "published": "2026-04-16T12:15:14Z" }, { "ghsa": "GHSA-3pw3-v88x-xj24", "severity": "medium", "published": "2026-04-16T12:14:14Z" }, { "ghsa": "GHSA-68qg-g8mg-6pr7", "cve": "CVE-2026-41679", "severity": "critical", "published": "2026-04-10T16:50:27Z" } ] }, "updatedAt": "2026-10-25T15:27:37.896892187Z" } }, "answer": "Vibe-Trading scores 62.2 (B) on agent readiness against Paperclip's 59 (C), and leads in 2 of 7 scored categories. Paperclip leads on schema \u0026 documentation and transparency \u0026 trust.", "b": { "slug": "vibe-trading", "name": "Vibe-Trading", "vendor": "HKUDS", "vendorUrl": "https://vibetrading.wiki", "kind": "harness", "category": "agent-harnesses", "summary": "Vibe-Trading is an open-source, self-hosted finance research agent from HKUDS. It turns plain-English questions into market data pulls, strategy code and backtests, through a CLI, a web UI, chat apps or its MCP server.", "url": "https://www.anchorterminal.com/tools/vibe-trading", "markdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vibe-trading.json", "repo": "https://github.com/HKUDS/Vibe-Trading", "license": "MIT", "transports": [ "stdio", "streamable-http", "sse" ], "packages": [ { "registry": "pypi", "name": "vibe-trading-ai" } ], "auth": "none", "authNotes": "No account with the project. The owner supplies a model provider key in `agent/.env`, or uses Ollama, a ChatGPT OAuth sign-in for OpenAI Codex, a GitHub Copilot login or a local Claude Code login. The API server answers loopback clients without a key; any other client needs `API_AUTH_KEY` as `Authorization: Bearer \u003ckey\u003e`. The MCP server's HTTP transport binds 127.0.0.1 with a Host and Origin allow-list and no token. Broker connector credentials are stored in the OS keyring by `vibe-trading connector setup` (https://github.com/HKUDS/Vibe-Trading/blob/main/README.md).", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model through Ollama. 29 market-data sources are built in and most need no key. QVeris, an optional paid data marketplace, is a third party and is reached only in paid mode; the README carries a QVeris referral link and discloses it (checked 2026-10-25).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the source at v0.1.18 (checked 2026-10-25).", "endpoints": [] }, "toolCount": 82, "popularity": { "githubStars": 36500, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-25" }, "docsUrl": "https://vibetrading.wiki/docs/", "capabilities": [ "agent.harness", "agent.multi-agent", "agent.mcp-client", "data.markets", "market.crypto", "market.news", "assistant.messaging", "assistant.proactive" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "mcp", "cli", "harness", "docker", "no-card", "no-sandbox", "pre-1.0", "beta" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 62.2, "grade": "B", "agentReady": false, "rank": 502, "ranked": true, "rankOf": 1210, "categoryRank": 12, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 82, "payments": 60, "reliability": 63, "schema": 72, "security": 70, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-25" }, "negative": -4, "negativeNotes": [ "2026-10-02. GHSA-v2f8-6655-7grj (CVE-2026-114108, critical). In 0.1.0 to 0.1.6 the API server answered every client without authentication when `API_AUTH_KEY` was unset, the shipped default, with the Docker container running as root on 0.0.0.0:8899, which the advisory chains to remote code execution. Fixed in 0.1.7 of 6 May 2026 and published five months later, -2. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj", "2026-10-02. GHSA-jqmf-mx4f-hfr6 (CVE-2026-114107, critical). Shell and code injection in the LLM-callable `bash`, `background_run` and backtest tools, and SSRF in `read_url`, reachable through the unauthenticated API or prompt injection in a processed document, in 0.1.0 to 0.1.6. Fixed in the same 0.1.7 release, -1. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-jqmf-mx4f-hfr6", "2026-10-02. GHSA-5rmq-chc7-m22f (CVE-2026-114106, high). `read_document` read any file the process could reach and `safe_user_path()` accepted the whole home directory, in 0.1.0 to 0.1.6. Fixed in 0.1.7, -1. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-5rmq-chc7-m22f" ], "verdict": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.", "bestFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.", "strengths": [ "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.1.18", "No order-placing or order-cancelling tool is exposed over MCP, and shell tools are off on every MCP transport by default", "Live orders need an owner-committed mandate with hard caps, a kill switch and an append-only, hash-chained audit ledger", "Six PyPI releases in the 90 days to 25 October 2026, with a dated CHANGELOG.md and a Known issues section in 0.1.18", "API server answers only loopback clients without `API_AUTH_KEY`; Docker binds 127.0.0.1 and runs as a non-root user" ], "weaknesses": [ "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain", "The local CLI's `bash` tool and generated backtest code run without per-action approval or a sandbox", "82 MCP tools with about 44,000 characters of descriptions in the server source and no readOnlyHint or destructiveHint annotations", "Version 0.1.18 with a Beta classifier, and not in the official MCP registry", "Broker trading is described in the README as experimental and not verified against a real broker account" ], "agentNotes": [ "Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain", "Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`", "Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server", "Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed", "Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.2 } ], "editorialScores": { "ergonomics": 67, "maintenance": 82, "payments": 60, "reliability": 63, "schema": 72, "security": 70, "transparency": 67 }, "provenanceScore": 27, "checked": { "categories": { "ergonomics": "2026-10-25", "maintenance": "2026-10-25", "payments": "2026-10-25", "reliability": "2026-10-25", "schema": "2026-10-25", "security": "2026-10-25", "transparency": "2026-10-25" }, "last": "2026-10-25", "oldest": "2026-10-25", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install vibe-trading-ai # then: vibe-trading init # or: docker compose up --build from a clone", "config": { "mcpServers": { "vibe-trading": { "command": "vibe-trading-mcp" } } }, "headless": { "command": "vibe-trading run -p \"$TASK\" --json" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/vibe-trading" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "vibetrading.wiki", "domainRegistered": "2026-05-14", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/Vibe-Trading/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-25", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, and pyproject.toml names HKUDS with an address at connect.hku.hk as author. The LICENSE names Vibe-Trading Contributors and NOTICE names HKUDS contributors.", "vibetrading.wiki is a static wiki on Cloudflare Pages built from the repository's wiki/ folder. It has no terms or privacy page, and the MIT licence stands in for terms.", "/robots.txt, /llms.txt and /.well-known/security.txt on vibetrading.wiki all answered with the same HTML redirect to /home/ on 25 October 2026, so there are no robots rules, no llms.txt and no security.txt.", "SECURITY.md asks for private reports through a GitHub security advisory and promises an acknowledgement within five business days.", "RDAP gives a registration date of 14 May 2026 for vibetrading.wiki. The README dates the wiki's launch to the same day.", "There is no hosted endpoint. The API and MCP server answer on the owner's own host." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vibe-trading.json", "live": { "slug": "vibe-trading", "securityTxt": { "url": "https://vibetrading.wiki/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-25T15:28:03.847411428Z" }, "updatedAt": "2026-10-25T15:28:03.847411428Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Paperclip Labs, Inc.", "b": "HKUDS", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "stdio, Streamable HTTP, SSE (legacy)", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "none", "b": "82", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-05", "b": "2026-10-21", "name": "Last release" }, { "a": "2026-07-23", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-07-23", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "99k stars, 60k npm/wk", "b": "37k stars", "name": "Popularity" } ], "faq": [ { "answer": "Vibe-Trading scores 62.2 (B) on agent readiness against Paperclip's 59 (C), and leads in 2 of 7 scored categories. Paperclip leads on schema \u0026 documentation and transparency \u0026 trust.", "question": "Which is better for AI agents, Paperclip or Vibe-Trading?" }, { "answer": "Yes. Paperclip is open source (MIT). Vibe-Trading is open source (MIT).", "question": "Are Paperclip and Vibe-Trading open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 81 against 72", "Transparency \u0026 trust, 65 against 47" ], "also": null, "goodFor": "Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.", "slug": "paperclip", "watchFor": "`claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host" }, { "aheadOn": [ "Security \u0026 auth, 70 against 64" ], "also": [ "No key needed to call it", "Runs on your own machine" ], "goodFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.", "slug": "vibe-trading", "watchFor": "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain" } ], "job": { "capability": "agent.multi-agent", "name": "Multi-agent orchestration" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.json", "title": "Agent Zero vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading.json", "title": "Aider vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading.json", "title": "Amp vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.json", "title": "Antigravity CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.json", "title": "Auggie CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.json", "title": "Claude Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading.json", "title": "Cline vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading.json", "title": "Crush vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.json", "title": "Cursor CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.json", "title": "DeepSeek Harness (dsh) vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading.json", "title": "Devin vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.json", "title": "Droid CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.json", "title": "Pi vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.json", "title": "Gemini CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.json", "title": "GitHub Copilot CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading.json", "title": "goose vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.json", "title": "Harness² vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.json", "title": "HarnessRouter vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading.json", "title": "Jules vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading.json", "title": "Junie CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.json", "title": "Kilo Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.json", "title": "Kimi Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.json", "title": "Kiro CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.json", "title": "mini-swe-agent vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.json", "title": "MiniMax Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.json", "title": "Mistral Vibe CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.json", "title": "Muse Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.json", "title": "OpenAI Codex vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.json", "title": "OpenCode vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.json", "title": "OpenHands vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.json", "title": "Prime Agent vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.json", "title": "Qoder CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.json", "title": "Qwen Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.json", "title": "Mirror CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.json", "title": "Rovo Dev CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp.json", "title": "Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-paperclip.json", "title": "Amp vs Paperclip", "url": "https://www.anchorterminal.com/compare/amp-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip.json", "title": "Antigravity CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-paperclip.json", "title": "Auggie CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/auggie-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip.json", "title": "Claude Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-paperclip.json", "title": "CLI Manager vs Paperclip", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.json", "title": "CLI Manager vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-paperclip.json", "title": "Cline vs Paperclip", "url": "https://www.anchorterminal.com/compare/cline-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-paperclip.json", "title": "Crush vs Paperclip", "url": "https://www.anchorterminal.com/compare/crush-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-paperclip.json", "title": "DeepSeek Harness (dsh) vs Paperclip", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-paperclip.json", "title": "Devin vs Paperclip", "url": "https://www.anchorterminal.com/compare/devin-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-paperclip.json", "title": "Droid CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.json", "title": "Gemini CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip.json", "title": "GitHub Copilot CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-paperclip.json", "title": "goose vs Paperclip", "url": "https://www.anchorterminal.com/compare/goose-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip.json", "title": "Harness vs Paperclip", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.json", "title": "Harness vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip.json", "title": "HarnessRouter vs Paperclip", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-paperclip.json", "title": "Jules vs Paperclip", "url": "https://www.anchorterminal.com/compare/jules-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-paperclip.json", "title": "Junie CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/junie-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.json", "title": "Kilo Code CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-paperclip.json", "title": "Kimi Code CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.json", "title": "Kiro CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-paperclip.json", "title": "MiniMax Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip.json", "title": "Mistral Vibe CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-paperclip.json", "title": "Muse Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/muse-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-paperclip.json", "title": "OpenCode vs Paperclip", "url": "https://www.anchorterminal.com/compare/opencode-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-paperclip.json", "title": "OpenHands vs Paperclip", "url": "https://www.anchorterminal.com/compare/openhands-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents.json", "title": "Paperclip vs Parallax", "url": "https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-prime-agent.json", "title": "Paperclip vs Prime Agent", "url": "https://www.anchorterminal.com/compare/paperclip-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-qoder-cli.json", "title": "Paperclip vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/paperclip-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.json", "title": "Paperclip vs Qwen Code", "url": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.json", "title": "Paperclip vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-rovo-dev-cli.json", "title": "Paperclip vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/paperclip-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-warp.json", "title": "Paperclip vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/paperclip-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.json", "title": "Parallax vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading" } ], "scores": [ { "by": 3, "edge": "paperclip", "key": "reliability", "name": "Reliability", "paperclip": 66, "vibe-trading": 63, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 9, "edge": "paperclip", "key": "schema", "name": "Schema \u0026 documentation", "paperclip": 81, "vibe-trading": 72, "weight": 13 }, { "by": 3, "edge": "paperclip", "key": "ergonomics", "name": "Agent ergonomics", "paperclip": 70, "vibe-trading": 67, "weight": 13 }, { "by": 6, "edge": "vibe-trading", "key": "security", "name": "Security \u0026 auth", "paperclip": 64, "vibe-trading": 70, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "paperclip": 60, "vibe-trading": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 4, "edge": "vibe-trading", "key": "maintenance", "name": "Maintenance \u0026 community", "paperclip": 78, "vibe-trading": 82, "weight": 7 }, { "by": 18, "edge": "paperclip", "key": "transparency", "name": "Transparency \u0026 trust", "paperclip": 65, "vibe-trading": 47, "weight": 7 } ], "summary": "Vibe-Trading scores 62.2 (B) on agent readiness against Paperclip's 59 (C), and leads in 2 of 7 scored categories. Paperclip leads on schema \u0026 documentation and transparency \u0026 trust. Both do multi-agent orchestration.", "tutorials": [], "verdicts": { "paperclip": "Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.", "vibe-trading": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading", "json": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.min.md" }, "markdown": "Vibe-Trading scores 62.2 (B) on agent readiness against Paperclip's 59 (C), and leads in 2 of 7 scored categories. Paperclip leads on schema \u0026 documentation and transparency \u0026 trust. Both do multi-agent orchestration.\n\n- Paperclip: grade C, 59/100, rank #642 of 1210. Markdown https://www.anchorterminal.com/tools/paperclip.md · JSON https://www.anchorterminal.com/api/v1/tools/paperclip.json\n- Vibe-Trading: grade B, 62.2/100, rank #502 of 1210. Markdown https://www.anchorterminal.com/tools/vibe-trading.md · JSON https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 792 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Paperclip (C)\n\nGood for: Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.\n\nAhead on:\n- Schema \u0026 documentation, 81 against 72\n- Transparency \u0026 trust, 65 against 47\n\nWatch for: `claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host\n\n### Vibe-Trading (B)\n\nGood for: A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.\n\nAhead on:\n- Security \u0026 auth, 70 against 64\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n\nWatch for: Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain\n\n\n## Score by category\n\n| Category | Weight | Paperclip | Vibe-Trading | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 66 | 63 | Paperclip +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 72 | Paperclip +9 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 67 | Paperclip +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 64 | 70 | Vibe-Trading +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 82 | Vibe-Trading +4 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 47 | Paperclip +18 |\n| Negative events | ≤15 | -10 | -4 | |\n| **Total** | | **59 · C** | **62.2 · B** | |\n\n## Facts side by side\n\n| Fact | Paperclip | Vibe-Trading |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Paperclip Labs, Inc. | HKUDS |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | stdio, Streamable HTTP, SSE (legacy) |\n| Auth | OAuth or key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Tools exposed | none | 82 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-05 | 2026-10-21 |\n| Terms last updated | 2026-07-23 | no document linked |\n| Privacy policy last updated | 2026-07-23 | no document linked |\n| Customer content may train models | yes, with an opt-out | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 99k stars, 60k npm/wk | 37k stars |\n\n## Verdicts\n\n**Paperclip.** Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.\n\n**Vibe-Trading.** Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.\n\n## Before you call either\n\n### Paperclip\n\n1. Set `PAPERCLIP_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1` before the first start. Telemetry is on by default\n2. Set `dangerouslySkipPermissions` and `dangerouslyBypassApprovalsAndSandbox` to false on agents that read untrusted input, or run them in a sandbox provider\n3. Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there\n4. Use `--bind lan` or `--bind tailnet` at onboarding for anything beyond one machine. The default `local_trusted` mode treats every request as the board admin\n5. Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry\n\n### Vibe-Trading\n\n1. Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain\n2. Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`\n3. Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server\n4. Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed\n5. Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them\n\n## Questions\n\n### Which is better for AI agents, Paperclip or Vibe-Trading?\n\nVibe-Trading scores 62.2 (B) on agent readiness against Paperclip's 59 (C), and leads in 2 of 7 scored categories. Paperclip leads on schema \u0026 documentation and transparency \u0026 trust.\n\n### Are Paperclip and Vibe-Trading open source?\n\nYes. Paperclip is open source (MIT). Vibe-Trading is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.json, and with the fewest tokens: https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"paperclip\", \"b\": \"vibe-trading\"}`. From a terminal: `anchor compare paperclip vibe-trading`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/paperclip.json and https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n\n## Other comparisons with Paperclip or Vibe-Trading\n\n- [Agent Zero vs Vibe-Trading](https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.md)\n- [Aider vs Vibe-Trading](https://www.anchorterminal.com/compare/aider-vs-vibe-trading.md)\n- [Amp vs Vibe-Trading](https://www.anchorterminal.com/compare/amp-vs-vibe-trading.md)\n- [Antigravity CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.md)\n- [Auggie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.md)\n- [Claude Code vs Vibe-Trading](https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.md)\n- [Cline vs Vibe-Trading](https://www.anchorterminal.com/compare/cline-vs-vibe-trading.md)\n- [Crush vs Vibe-Trading](https://www.anchorterminal.com/compare/crush-vs-vibe-trading.md)\n- [Cursor CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.md)\n- [DeepSeek Harness (dsh) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.md)\n- [Devin vs Vibe-Trading](https://www.anchorterminal.com/compare/devin-vs-vibe-trading.md)\n- [Droid CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.md)\n- [Pi vs Vibe-Trading](https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.md)\n- [Gemini CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.md)\n- [GitHub Copilot CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.md)\n- [goose vs Vibe-Trading](https://www.anchorterminal.com/compare/goose-vs-vibe-trading.md)\n- [Harness² vs Vibe-Trading](https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.md)\n- [HarnessRouter vs Vibe-Trading](https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.md)\n- [Jules vs Vibe-Trading](https://www.anchorterminal.com/compare/jules-vs-vibe-trading.md)\n- [Junie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/junie-vs-vibe-trading.md)\n- [Kilo Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.md)\n- [Kimi Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.md)\n- [Kiro CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.md)\n- [mini-swe-agent vs Vibe-Trading](https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.md)\n- [MiniMax Code vs Vibe-Trading](https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.md)\n- [Mistral Vibe CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.md)\n- [Muse Code vs Vibe-Trading](https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.md)\n- [OpenAI Codex vs Vibe-Trading](https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.md)\n- [OpenCode vs Vibe-Trading](https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.md)\n- [OpenHands vs Vibe-Trading](https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.md)\n- [Prime Agent vs Vibe-Trading](https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.md)\n- [Qoder CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.md)\n- [Qwen Code vs Vibe-Trading](https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.md)\n- [Mirror CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.md)\n- [Rovo Dev CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.md)\n- [Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/vibe-trading-vs-warp.md)\n- [Amp vs Paperclip](https://www.anchorterminal.com/compare/amp-vs-paperclip.md)\n- [Antigravity CLI vs Paperclip](https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip.md)\n- [Auggie CLI vs Paperclip](https://www.anchorterminal.com/compare/auggie-vs-paperclip.md)\n- [Claude Code vs Paperclip](https://www.anchorterminal.com/compare/claude-code-vs-paperclip.md)\n- [CLI Manager vs Paperclip](https://www.anchorterminal.com/compare/cli-manager-vs-paperclip.md)\n- [CLI Manager vs Vibe-Trading](https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.md)\n- [Cline vs Paperclip](https://www.anchorterminal.com/compare/cline-vs-paperclip.md)\n- [Crush vs Paperclip](https://www.anchorterminal.com/compare/crush-vs-paperclip.md)\n- [DeepSeek Harness (dsh) vs Paperclip](https://www.anchorterminal.com/compare/deepseek-harness-vs-paperclip.md)\n- [Devin vs Paperclip](https://www.anchorterminal.com/compare/devin-vs-paperclip.md)\n- [Droid CLI vs Paperclip](https://www.anchorterminal.com/compare/droid-cli-vs-paperclip.md)\n- [Gemini CLI vs Paperclip](https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.md)\n- [GitHub Copilot CLI vs Paperclip](https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip.md)\n- [goose vs Paperclip](https://www.anchorterminal.com/compare/goose-vs-paperclip.md)\n- [Harness vs Paperclip](https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip.md)\n- [Harness vs Vibe-Trading](https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.md)\n- [HarnessRouter vs Paperclip](https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip.md)\n- [Jules vs Paperclip](https://www.anchorterminal.com/compare/jules-vs-paperclip.md)\n- [Junie CLI vs Paperclip](https://www.anchorterminal.com/compare/junie-vs-paperclip.md)\n- [Kilo Code CLI vs Paperclip](https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.md)\n- [Kimi Code CLI vs Paperclip](https://www.anchorterminal.com/compare/kimi-code-cli-vs-paperclip.md)\n- [Kiro CLI vs Paperclip](https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.md)\n- [MiniMax Code vs Paperclip](https://www.anchorterminal.com/compare/minimax-code-vs-paperclip.md)\n- [Mistral Vibe CLI vs Paperclip](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip.md)\n- [Muse Code vs Paperclip](https://www.anchorterminal.com/compare/muse-code-vs-paperclip.md)\n- [OpenCode vs Paperclip](https://www.anchorterminal.com/compare/opencode-vs-paperclip.md)\n- [OpenHands vs Paperclip](https://www.anchorterminal.com/compare/openhands-vs-paperclip.md)\n- [Paperclip vs Parallax](https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents.md)\n- [Paperclip vs Prime Agent](https://www.anchorterminal.com/compare/paperclip-vs-prime-agent.md)\n- [Paperclip vs Qoder CLI](https://www.anchorterminal.com/compare/paperclip-vs-qoder-cli.md)\n- [Paperclip vs Qwen Code](https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.md)\n- [Paperclip vs Mirror CLI](https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.md)\n- [Paperclip vs Rovo Dev CLI](https://www.anchorterminal.com/compare/paperclip-vs-rovo-dev-cli.md)\n- [Paperclip vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/paperclip-vs-warp.md)\n- [Parallax vs Vibe-Trading](https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-25", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Paperclip vs Vibe-Trading", "url": "" } ], "description": "Vibe-Trading scores 62.2 (B) to Paperclip's 59 (C) for multi-agent orchestration. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Paperclip C 59", "Vibe-Trading B 62.2", "scores" ], "h1": "Paperclip vs Vibe-Trading", "image": "https://www.anchorterminal.com/assets/og/compare-paperclip-vs-vibe-trading.png", "path": "/compare/paperclip-vs-vibe-trading", "published": "2026-10-01", "section": "tools", "title": "Paperclip vs Vibe-Trading for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-25", "url": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading" }, "tokens": { "markdown": 3600, "slim": 630 }, "version": 1 }